diff -Nuar samba.0/log.wb-ARW2003R2 samba.1/log.wb-ARW2003R2 --- samba.0/log.wb-ARW2003R2 2013-11-05 16:03:28.020000000 +0100 +++ samba.1/log.wb-ARW2003R2 2013-11-05 16:03:31.320000000 +0100 @@ -1,2 +1,1703 @@ [2013/11/05 16:03:21.773805, 0] ../source3/winbindd/winbindd.c:234(winbindd_sig_term_handler) Got sig[15] terminate (is_parent=0) +[2013/11/05 16:03:28.049090, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) + Deregistering messaging pointer for type 33 - private_data=(nil) +[2013/11/05 16:03:28.049182, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) + Deregistering messaging pointer for type 13 - private_data=(nil) +[2013/11/05 16:03:28.049226, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) + Deregistering messaging pointer for type 1028 - private_data=(nil) +[2013/11/05 16:03:28.049267, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) + Deregistering messaging pointer for type 1027 - private_data=(nil) +[2013/11/05 16:03:28.049307, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) + Deregistering messaging pointer for type 1029 - private_data=(nil) +[2013/11/05 16:03:28.049348, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) + Deregistering messaging pointer for type 1280 - private_data=(nil) +[2013/11/05 16:03:28.049388, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) + Deregistering messaging pointer for type 1033 - private_data=(nil) +[2013/11/05 16:03:28.049428, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) + Deregistering messaging pointer for type 1 - private_data=(nil) +[2013/11/05 16:03:28.049625, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) + Registering messaging pointer for type 1028 - private_data=(nil) +[2013/11/05 16:03:28.049682, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) + Registering messaging pointer for type 1027 - private_data=(nil) +[2013/11/05 16:03:28.049724, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) + Registering messaging pointer for type 1280 - private_data=(nil) +[2013/11/05 16:03:28.049765, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) + Registering messaging pointer for type 1 - private_data=(nil) +[2013/11/05 16:03:28.049809, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) + Registering messaging pointer for type 1034 - private_data=(nil) +[2013/11/05 16:03:28.049856, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:308(messaging_register) + Overriding messaging pointer for type 1034 - private_data=(nil) +[2013/11/05 16:03:28.049959, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:499(set_domain_online_request) + set_domain_online_request: called for domain ARW2003R2 +[2013/11/05 16:03:28.050022, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:534(set_domain_online_request) + set_domain_online_request: domain ARW2003R2 was globally offline. +[2013/11/05 16:03:28.050066, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:499(set_domain_online_request) + set_domain_online_request: called for domain AR32I8 +[2013/11/05 16:03:28.050105, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:509(set_domain_online_request) + set_domain_online_request: Internal domains are always online +[2013/11/05 16:03:28.050222, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_dual.c:71(child_read_request) + Need to read 52 extra bytes +[2013/11/05 16:03:28.050271, 4, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_dual.c:1333(child_handler) + child daemon request 59 +[2013/11/05 16:03:28.050312, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_dual.c:458(child_process_request) + child_process_request: request fn NDRCMD +[2013/11/05 16:03:28.050379, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_dual_ndr.c:315(winbindd_dual_ndrcmd) + winbindd_dual_ndrcmd: Running command WBINT_LOOKUPNAME (ARW2003R2) +[2013/11/05 16:03:28.050542, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) + wbint_LookupName: struct wbint_LookupName + in: struct wbint_LookupName + domain : * + domain : 'ARW2003R2' + name : * + name : 'WINUSER1' + flags : 0x00000000 (0) +[2013/11/05 16:03:28.050756, 3, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:1796(connection_ok) + connection_ok: Connection to (null) for domain ARW2003R2 is not connected +[2013/11/05 16:03:28.050930, 5, pid=12245, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:67(gencache_init) + Opening cache file at /var/cache/samba/gencache.tdb +[2013/11/05 16:03:28.051142, 5, pid=12245, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:110(gencache_init) + Opening cache file at /var/run/samba/gencache_notrans.tdb +[2013/11/05 16:03:28.051252, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:208(saf_fetch) + saf_fetch: failed to find server for "ARW2003R2" domain +[2013/11/05 16:03:28.051315, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:1613(cm_open_connection) + cm_open_connection: dcname is '' for domain ARW2003R2 +[2013/11/05 16:03:28.051378, 8, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3289(get_sorted_dc_list) + get_sorted_dc_list: attempting lookup for name ARW2003R2 (sitename NULL) +[2013/11/05 16:03:28.051456, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:208(saf_fetch) + saf_fetch: failed to find server for "ARW2003R2" domain +[2013/11/05 16:03:28.051589, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3102(get_dc_list) + get_dc_list: preferred server list: ", *" +[2013/11/05 16:03:28.051666, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2598(internal_resolve_name) + internal_resolve_name: looking up ARW2003R2#1c (sitename (null)) +[2013/11/05 16:03:28.051785, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:160(namecache_fetch) + no entry for ARW2003R2#1C found. +[2013/11/05 16:03:28.051863, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2266(resolve_lmhosts) + resolve_lmhosts: Attempting lmhosts lookup for name ARW2003R2<0x1c> +[2013/11/05 16:03:28.052019, 3, pid=12245, effective(0, 0), real(0, 0)] ../libcli/nbt/lmhosts.c:185(resolve_lmhosts_file_as_sockaddr) + resolve_lmhosts: Attempting lmhosts lookup for name ARW2003R2<0x1c> +[2013/11/05 16:03:28.052103, 4, pid=12245, effective(0, 0), real(0, 0)] ../libcli/nbt/lmhosts.c:41(startlmhosts) + startlmhosts: Can't open lmhosts file /etc/samba/lmhosts. Error was Datei oder Verzeichnis nicht gefunden +[2013/11/05 16:03:28.052528, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2110(resolve_wins_send) + wins_server_tag_ips failed for tag * +[2013/11/05 16:03:28.052773, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2315(resolve_hosts) + resolve_hosts: not appropriate for name type <0x1c> +[2013/11/05 16:03:28.052861, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1806(name_resolve_bcast_send) + name_resolve_bcast: Attempting broadcast lookup for name ARW2003R2<0x1c> +[2013/11/05 16:03:28.053162, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:499(open_socket_in) + bind succeeded on port 0 +[2013/11/05 16:03:28.053248, 5, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options) + Socket options: + SO_KEEPALIVE = 0 + SO_REUSEADDR = 1 + SO_BROADCAST = 1 + Could not test socket option TCP_NODELAY. + Could not test socket option TCP_KEEPCNT. + Could not test socket option TCP_KEEPIDLE. + Could not test socket option TCP_KEEPINTVL. + IPTOS_LOWDELAY = 0 + IPTOS_THROUGHPUT = 0 + SO_REUSEPORT = 1 + SO_SNDBUF = 212992 + SO_RCVBUF = 212992 + SO_SNDLOWAT = 1 + SO_RCVLOWAT = 1 + SO_SNDTIMEO = 0 + SO_RCVTIMEO = 0 + Could not test socket option TCP_QUICKACK. + Could not test socket option TCP_DEFER_ACCEPT. +[2013/11/05 16:03:28.056469, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/nmblib.c:550(parse_nmb) + parse_nmb: packet id = 9341 +[2013/11/05 16:03:28.056648, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/nmblib.c:108(debug_nmb_packet) + nmb packet from 10.200.8.235(35072) header: id=9341 opcode=Query(0) response=Yes + header: flags: bcast=No rec_avail=No rec_des=Yes trunc=No auth=Yes + header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 + answers: nmb_name=ARW2003R2<1c> rr_type=32 rr_class=1 ttl=300000 + answers 0 char ...... hex 80000AC808EB +[2013/11/05 16:03:28.056956, 2, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1356(name_query_validator) + Got a positive name query response from 10.200.8.235 ( 10.200.8.235 ) +[2013/11/05 16:03:28.057012, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:466(sock_packet_read_got_socket) + validator failed +[2013/11/05 16:03:29.056378, 2, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/tevent_debug.c:63(samba_tevent_debug) + samba_tevent: EPOLL_CTL_DEL EBADF for fde[0x7f6040ca63e0] mpx_fde[(nil)] fd[22] - disabling +[2013/11/05 16:03:29.056952, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1110(remove_duplicate_addrs2) + remove_duplicate_addrs2: looking for duplicate address/port pairs +[2013/11/05 16:03:29.057120, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:78(namecache_store) + namecache_store: storing 1 address for ARW2003R2#1c: 10.200.8.235 +[2013/11/05 16:03:29.057482, 10, pid=12245, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob) + Adding cache entry with key=[NBT/ARW2003R2#1C] and timeout=[Di Nov 5 16:14:29 2013 CET] (660 seconds ahead) +[2013/11/05 16:03:29.057802, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2764(internal_resolve_name) + internal_resolve_name: returning 1 addresses: 10.200.8.235:0 +[2013/11/05 16:03:29.057931, 8, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3123(get_dc_list) + Adding 1 DC's from auto lookup +[2013/11/05 16:03:29.058087, 9, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) + check_negative_conn_cache returning result 0 for domain ARW2003R2 server 10.200.8.235 +[2013/11/05 16:03:29.058199, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1110(remove_duplicate_addrs2) + remove_duplicate_addrs2: looking for duplicate address/port pairs +[2013/11/05 16:03:29.058304, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3239(get_dc_list) + get_dc_list: returning 1 ip addresses in an unordered list +[2013/11/05 16:03:29.058402, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3240(get_dc_list) + get_dc_list: 10.200.8.235:0 +[2013/11/05 16:03:29.058562, 9, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) + check_negative_conn_cache returning result 0 for domain ARW2003R2 server 10.200.8.235 +[2013/11/05 16:03:29.058986, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:585(open_socket_out_send) + Connecting to 10.200.8.235 at port 445 +[2013/11/05 16:03:29.062210, 8, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:347(fcntl_lock) + fcntl_lock 23 6 0 1 0 +[2013/11/05 16:03:29.062459, 3, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:358(fcntl_lock) + fcntl_lock: fcntl lock gave errno 11 (Die Ressource ist zur Zeit nicht verfügbar) +[2013/11/05 16:03:29.062716, 3, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:377(fcntl_lock) + fcntl_lock: lock failed at offset 0 count 1 op 6 type 0 (Die Ressource ist zur Zeit nicht verfügbar) +[2013/11/05 16:03:29.062946, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/pidfile.c:80(pidfile_pid) + Process with PID=8475 is running. +[2013/11/05 16:03:29.063090, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + &packet: struct nbt_netlogon_packet + command : LOGON_SAM_LOGON_REQUEST (18) + req : union nbt_netlogon_request(case 18) + logon: struct NETLOGON_SAM_LOGON_REQUEST + request_count : 0x0000 (0) + computer_name : 'MASTER40' + user_name : 'MASTER40$' + mailslot_name : '\MAILSLOT\NET\GETDCEB08C80A' + acct_control : 0x00000080 (128) + sid_size : 0x00000000 (0) + _pad : DATA_BLOB length=0 + sid : S-1-5-21-799654949-2773767257-1491219514 + nt_version : 0x00000001 (1) + 1: NETLOGON_NT_VERSION_1 + 0: NETLOGON_NT_VERSION_5 + 0: NETLOGON_NT_VERSION_5EX + 0: NETLOGON_NT_VERSION_5EX_WITH_IP + 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE + 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL + 0: NETLOGON_NT_VERSION_PDC + 0: NETLOGON_NT_VERSION_IP + 0: NETLOGON_NT_VERSION_LOCAL + 0: NETLOGON_NT_VERSION_GC + lmnt_token : 0xffff (65535) + lm20_token : 0xffff (65535) +[2013/11/05 16:03:29.067244, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/clidgram.c:107(cli_prep_mailslot) + send_mailslot: Sending to mailslot \MAILSLOT\NET\NTLOGON from MASTER40<00> to ARW2003R2<1c> IP 10.200.8.235 +[2013/11/05 16:03:29.068369, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/messages_local.c:282(messaging_tdb_store) + messaging_tdb_store: +[2013/11/05 16:03:29.068554, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + array: struct messaging_array + num_messages : 0x00000001 (1) + messages: ARRAY(1) + messages: struct messaging_rec + msg_version : 0x00000002 (2) + msg_type : MSG_SEND_PACKET (259) + dest: struct server_id + pid : 0x000000000000211b (8475) + task_id : 0x00000000 (0) + vnn : 0xffffffff (4294967295) + unique_id : 0x0000000000000000 (0) + src: struct server_id + pid : 0x0000000000002fd5 (12245) + task_id : 0x00000000 (0) + vnn : 0xffffffff (4294967295) + unique_id : 0x0000000000000000 (0) + buf : DATA_BLOB length=840 + [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0010] 00 00 00 00 0A C8 08 EB 00 00 00 00 00 00 00 00 ........ ........ + [0020] 00 00 00 00 00 00 00 00 C1 08 79 52 00 00 00 00 ........ ..yR.... + [0030] 01 00 00 00 00 00 00 00 11 00 00 00 02 00 00 00 ........ ........ + [0040] 01 00 00 00 6A 11 00 00 00 00 00 00 00 00 00 00 ....j... ........ + [0050] 00 00 00 00 00 00 00 00 4D 41 53 54 45 52 34 30 ........ MASTER40 + [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 41 52 57 32 ........ ....ARW2 + [00B0] 30 30 33 52 32 00 00 00 00 00 00 00 00 00 00 00 003R2... ........ + [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 1C 00 00 00 ........ ........ + [0100] CB 00 00 00 FF 53 4D 42 25 00 00 00 00 00 00 00 .....SMB %....... + [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0120] 00 00 00 00 11 00 00 70 00 00 00 00 00 00 00 00 .......p ........ + [0130] 00 00 00 00 00 00 00 00 00 00 00 70 00 5B 00 03 ........ ...p.[.. + [0140] 00 01 00 00 00 02 00 86 00 5C 4D 41 49 4C 53 4C ........ .\MAILSL + [0150] 4F 54 5C 4E 45 54 5C 4E 54 4C 4F 47 4F 4E 00 12 OT\NET\N TLOGON.. + [0160] 00 00 00 4D 00 41 00 53 00 54 00 45 00 52 00 34 ...M.A.S .T.E.R.4 + [0170] 00 30 00 00 00 4D 00 41 00 53 00 54 00 45 00 52 .0...M.A .S.T.E.R + [0180] 00 34 00 30 00 24 00 00 00 5C 4D 41 49 4C 53 4C .4.0.$.. .\MAILSL + [0190] 4F 54 5C 4E 45 54 5C 47 45 54 44 43 45 42 30 38 OT\NET\G ETDCEB08 + [01A0] 43 38 30 41 00 80 00 00 00 18 00 00 00 00 00 01 C80A.... ........ + [01B0] 04 00 00 00 00 00 05 15 00 00 00 25 C4 A9 2F 59 ........ ...%../Y + [01C0] 54 54 A5 3A 34 E2 58 01 00 00 00 FF FF FF FF 00 TT.:4.X. ........ + [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ + [0340] 00 00 00 00 00 00 00 00 ........ +[2013/11/05 16:03:29.078394, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + &p: struct dgram_smb_packet + smb_command : SMB_TRANSACTION (0x25) + err_class : 0x00 (0) + pad : 0x00 (0) + err_code : 0x0000 (0) + flags : 0x00 (0) + flags2 : 0x0000 (0) + pid_high : 0x0000 (0) + signature : 0000000000000000 + reserved : 0x0000 (0) + tid : 0x0000 (0) + pid : 0x0000 (0) + vuid : 0x0000 (0) + mid : 0x0000 (0) + body : union smb_body(case 0x25) + trans: struct smb_trans_body + wct : 0x11 (17) + total_param_count : 0x0000 (0) + total_data_count : 0x004c (76) + max_param_count : 0x0000 (0) + max_data_count : 0x0000 (0) + max_setup_count : 0x00 (0) + pad : 0x00 (0) + trans_flags : 0x0000 (0) + timeout : 0x000003e8 (1000) + reserved : 0x0000 (0) + param_count : 0x0000 (0) + param_offset : 0x0000 (0) + data_count : 0x004c (76) + data_offset : 0x0061 (97) + setup_count : 0x03 (3) + pad2 : 0x00 (0) + opcode : 0x0001 (1) + priority : 0x0001 (1) + _class : 0x0002 (2) + byte_count : 0x0068 (104) + mailslot_name : '\MAILSLOT\NET\GETDCEB08C80A' + data : DATA_BLOB length=76 + [0000] 15 00 5C 00 5C 00 57 00 32 00 4B 00 33 00 52 00 ..\.\.W. 2.K.3.R. + [0010] 32 00 2D 00 32 00 33 00 35 00 00 00 4D 00 41 00 2.-.2.3. 5...M.A. + [0020] 53 00 54 00 45 00 52 00 34 00 30 00 24 00 00 00 S.T.E.R. 4.0.$... + [0030] 41 00 52 00 57 00 32 00 30 00 30 00 33 00 52 00 A.R.W.2. 0.0.3.R. + [0040] 32 00 00 00 01 00 00 00 FF FF FF FF 2....... .... +[2013/11/05 16:03:29.079715, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + &response->data.nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 + command : LOGON_SAM_LOGON_USER_UNKNOWN (21) + pdc_name : '\\W2K3R2-235' + user_name : 'MASTER40$' + domain_name : 'ARW2003R2' + nt_version : 0x00000001 (1) + 1: NETLOGON_NT_VERSION_1 + 0: NETLOGON_NT_VERSION_5 + 0: NETLOGON_NT_VERSION_5EX + 0: NETLOGON_NT_VERSION_5EX_WITH_IP + 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE + 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL + 0: NETLOGON_NT_VERSION_PDC + 0: NETLOGON_NT_VERSION_IP + 0: NETLOGON_NT_VERSION_LOCAL + 0: NETLOGON_NT_VERSION_GC + lmnt_token : 0xffff (65535) + lm20_token : 0xffff (65535) +[2013/11/05 16:03:29.080135, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/clidgram.c:274(parse_getdc_response) + GetDC gave name W2K3R2-235 for domain ARW2003R2 +[2013/11/05 16:03:29.080300, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:78(namecache_store) + namecache_store: storing 1 address for W2K3R2-235#20: 10.200.8.235 +[2013/11/05 16:03:29.080385, 10, pid=12245, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob) + Adding cache entry with key=[NBT/W2K3R2-235#20] and timeout=[Di Nov 5 16:14:29 2013 CET] (660 seconds ahead) +[2013/11/05 16:03:29.080466, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:816(cm_prepare_connection) + cm_prepare_connection: connecting to DC W2K3R2-235 for domain ARW2003R2 +[2013/11/05 16:03:29.082577, 3, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:594(cm_get_ipc_userpass) + cm_get_ipc_userpass: Retrieved auth-user from secrets.tdb [AR32I8\Administrator] +[2013/11/05 16:03:29.082924, 5, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:952(cm_prepare_connection) + connecting to W2K3R2-235 from MASTER40 with username [AR32I8]\[Administrator] +[2013/11/05 16:03:29.083043, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/cliconnect.c:1781(cli_session_setup_spnego_send) + Doing spnego session setup (blob length=96) +[2013/11/05 16:03:29.083487, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/cliconnect.c:1808(cli_session_setup_spnego_send) + got OID=1.2.840.48018.1.2.2 + got OID=1.2.840.113554.1.2.2 + got OID=1.2.840.113554.1.2.2.3 + got OID=1.3.6.1.4.1.311.2.2.10 +[2013/11/05 16:03:29.083595, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/cliconnect.c:1818(cli_session_setup_spnego_send) + got principal=w2k3r2-235$@ARW2003R2.QA +[2013/11/05 16:03:29.084028, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + negotiate: struct NEGOTIATE_MESSAGE + Signature : 'NTLMSSP' + MessageType : NtLmNegotiate (1) + NegotiateFlags : 0x60088215 (1611170325) + 1: NTLMSSP_NEGOTIATE_UNICODE + 0: NTLMSSP_NEGOTIATE_OEM + 1: NTLMSSP_REQUEST_TARGET + 1: NTLMSSP_NEGOTIATE_SIGN + 0: NTLMSSP_NEGOTIATE_SEAL + 0: NTLMSSP_NEGOTIATE_DATAGRAM + 0: NTLMSSP_NEGOTIATE_LM_KEY + 0: NTLMSSP_NEGOTIATE_NETWARE + 1: NTLMSSP_NEGOTIATE_NTLM + 0: NTLMSSP_NEGOTIATE_NT_ONLY + 0: NTLMSSP_ANONYMOUS + 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED + 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED + 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL + 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN + 0: NTLMSSP_TARGET_TYPE_DOMAIN + 0: NTLMSSP_TARGET_TYPE_SERVER + 0: NTLMSSP_TARGET_TYPE_SHARE + 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY + 0: NTLMSSP_NEGOTIATE_IDENTIFY + 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY + 0: NTLMSSP_NEGOTIATE_TARGET_INFO + 0: NTLMSSP_NEGOTIATE_VERSION + 1: NTLMSSP_NEGOTIATE_128 + 1: NTLMSSP_NEGOTIATE_KEY_EXCH + 0: NTLMSSP_NEGOTIATE_56 + DomainNameLen : 0x0006 (6) + DomainNameMaxLen : 0x0006 (6) + DomainName : * + DomainName : 'AR32I8' + WorkstationLen : 0x0008 (8) + WorkstationMaxLen : 0x0008 (8) + Workstation : * + Workstation : 'MASTER40' +[2013/11/05 16:03:29.090275, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:271(smb_signing_sign_pdu) + smb_signing_sign_pdu: sent SMB signature of +[2013/11/05 16:03:29.090341, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] 42 53 52 53 50 59 4C 20 BSRSPYL +[2013/11/05 16:03:29.091855, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + challenge: struct CHALLENGE_MESSAGE + Signature : 'NTLMSSP' + MessageType : NtLmChallenge (0x2) + TargetNameLen : 0x0012 (18) + TargetNameMaxLen : 0x0012 (18) + TargetName : * + TargetName : 'ARW2003R2' + NegotiateFlags : 0x62898215 (1653178901) + 1: NTLMSSP_NEGOTIATE_UNICODE + 0: NTLMSSP_NEGOTIATE_OEM + 1: NTLMSSP_REQUEST_TARGET + 1: NTLMSSP_NEGOTIATE_SIGN + 0: NTLMSSP_NEGOTIATE_SEAL + 0: NTLMSSP_NEGOTIATE_DATAGRAM + 0: NTLMSSP_NEGOTIATE_LM_KEY + 0: NTLMSSP_NEGOTIATE_NETWARE + 1: NTLMSSP_NEGOTIATE_NTLM + 0: NTLMSSP_NEGOTIATE_NT_ONLY + 0: NTLMSSP_ANONYMOUS + 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED + 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED + 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL + 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN + 1: NTLMSSP_TARGET_TYPE_DOMAIN + 0: NTLMSSP_TARGET_TYPE_SERVER + 0: NTLMSSP_TARGET_TYPE_SHARE + 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY + 0: NTLMSSP_NEGOTIATE_IDENTIFY + 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY + 1: NTLMSSP_NEGOTIATE_TARGET_INFO + 1: NTLMSSP_NEGOTIATE_VERSION + 1: NTLMSSP_NEGOTIATE_128 + 1: NTLMSSP_NEGOTIATE_KEY_EXCH + 0: NTLMSSP_NEGOTIATE_56 + ServerChallenge : a99ac9182a800d59 + Reserved : 0000000000000000 + TargetInfoLen : 0x009c (156) + TargetNameInfoMaxLen : 0x009c (156) + TargetInfo : * + TargetInfo: struct AV_PAIR_LIST + count : 0x00000006 (6) + pair: ARRAY(6) + pair: struct AV_PAIR + AvId : MsvAvNbDomainName (0x2) + AvLen : 0x0012 (18) + Value : union ntlmssp_AvValue(case 0x2) + AvNbDomainName : 'ARW2003R2' + pair: struct AV_PAIR + AvId : MsvAvNbComputerName (0x1) + AvLen : 0x0014 (20) + Value : union ntlmssp_AvValue(case 0x1) + AvNbComputerName : 'W2K3R2-235' + pair: struct AV_PAIR + AvId : MsvAvDnsDomainName (0x4) + AvLen : 0x0018 (24) + Value : union ntlmssp_AvValue(case 0x4) + AvDnsDomainName : 'arw2003r2.qa' + pair: struct AV_PAIR + AvId : MsvAvDnsComputerName (0x3) + AvLen : 0x002e (46) + Value : union ntlmssp_AvValue(case 0x3) + AvDnsComputerName : 'w2k3r2-235.arw2003r2.qa' + pair: struct AV_PAIR + AvId : MsvAvDnsTreeName (0x5) + AvLen : 0x0018 (24) + Value : union ntlmssp_AvValue(case 0x5) + AvDnsTreeName : 'arw2003r2.qa' + pair: struct AV_PAIR + AvId : MsvAvEOL (0x0) + AvLen : 0x0000 (0) + Value : union ntlmssp_AvValue(case 0x0) + Version: struct ntlmssp_VERSION + ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (0x5) + ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_2 (0x2) + ProductBuild : 0x0ece (3790) + Reserved : 000000 + NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF) +[2013/11/05 16:03:29.094227, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/ntlmssp.c:455(ntlmssp3_client_challenge) + Got challenge flags: +[2013/11/05 16:03:29.094299, 3, pid=12245, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags) + Got NTLMSSP neg_flags=0x62898215 + NTLMSSP_NEGOTIATE_UNICODE + NTLMSSP_REQUEST_TARGET + NTLMSSP_NEGOTIATE_SIGN + NTLMSSP_NEGOTIATE_NTLM + NTLMSSP_NEGOTIATE_ALWAYS_SIGN + NTLMSSP_NEGOTIATE_NTLM2 + NTLMSSP_NEGOTIATE_TARGET_INFO + NTLMSSP_NEGOTIATE_VERSION + NTLMSSP_NEGOTIATE_128 + NTLMSSP_NEGOTIATE_KEY_EXCH +[2013/11/05 16:03:29.094561, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/ntlmssp.c:477(ntlmssp3_client_challenge) + NTLMSSP: Set final flags: +[2013/11/05 16:03:29.094604, 3, pid=12245, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags) + Got NTLMSSP neg_flags=0x60088215 + NTLMSSP_NEGOTIATE_UNICODE + NTLMSSP_REQUEST_TARGET + NTLMSSP_NEGOTIATE_SIGN + NTLMSSP_NEGOTIATE_NTLM + NTLMSSP_NEGOTIATE_ALWAYS_SIGN + NTLMSSP_NEGOTIATE_NTLM2 + NTLMSSP_NEGOTIATE_128 + NTLMSSP_NEGOTIATE_KEY_EXCH +[2013/11/05 16:03:29.095057, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + authenticate: struct AUTHENTICATE_MESSAGE + Signature : 'NTLMSSP' + MessageType : NtLmAuthenticate (3) + LmChallengeResponseLen : 0x0018 (24) + LmChallengeResponseMaxLen: 0x0018 (24) + LmChallengeResponse : * + LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) + v1: struct LM_RESPONSE + Response : 8ef25e4b1c8a017539f614ef4b2d5c2fb620483bdd285cc0 + NtChallengeResponseLen : 0x00c8 (200) + NtChallengeResponseMaxLen: 0x00c8 (200) + NtChallengeResponse : * + NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 200) + v2: struct NTLMv2_RESPONSE + Response : e3e46c480749ce1afb4453ce7887792a + Challenge: struct NTLMv2_CLIENT_CHALLENGE + RespType : 0x01 (1) + HiRespType : 0x01 (1) + Reserved1 : 0x0000 (0) + Reserved2 : 0x00000000 (0) + TimeStamp : Di Nov 5 16:03:29 2013 CET + ChallengeFromClient : 2638668d4fdddfe6 + Reserved3 : 0x00000000 (0) + AvPairs: struct AV_PAIR_LIST + count : 0x00000006 (6) + pair: ARRAY(6) + pair: struct AV_PAIR + AvId : MsvAvNbDomainName (0x2) + AvLen : 0x0012 (18) + Value : union ntlmssp_AvValue(case 0x2) + AvNbDomainName : 'ARW2003R2' + pair: struct AV_PAIR + AvId : MsvAvNbComputerName (0x1) + AvLen : 0x0014 (20) + Value : union ntlmssp_AvValue(case 0x1) + AvNbComputerName : 'W2K3R2-235' + pair: struct AV_PAIR + AvId : MsvAvDnsDomainName (0x4) + AvLen : 0x0018 (24) + Value : union ntlmssp_AvValue(case 0x4) + AvDnsDomainName : 'arw2003r2.qa' + pair: struct AV_PAIR + AvId : MsvAvDnsComputerName (0x3) + AvLen : 0x002e (46) + Value : union ntlmssp_AvValue(case 0x3) + AvDnsComputerName : 'w2k3r2-235.arw2003r2.qa' + pair: struct AV_PAIR + AvId : MsvAvDnsTreeName (0x5) + AvLen : 0x0018 (24) + Value : union ntlmssp_AvValue(case 0x5) + AvDnsTreeName : 'arw2003r2.qa' + pair: struct AV_PAIR + AvId : MsvAvEOL (0x0) + AvLen : 0x0000 (0) + Value : union ntlmssp_AvValue(case 0x0) + DomainNameLen : 0x000c (12) + DomainNameMaxLen : 0x000c (12) + DomainName : * + DomainName : 'AR32I8' + UserNameLen : 0x001a (26) + UserNameMaxLen : 0x001a (26) + UserName : * + UserName : 'Administrator' + WorkstationLen : 0x0010 (16) + WorkstationMaxLen : 0x0010 (16) + Workstation : * + Workstation : 'MASTER40' + EncryptedRandomSessionKeyLen: 0x0010 (16) + EncryptedRandomSessionKeyMaxLen: 0x0010 (16) + EncryptedRandomSessionKey: * + EncryptedRandomSessionKey: DATA_BLOB length=16 + [0000] DF 25 8B 2B 6E 43 BB 91 21 CC 0A 72 4D 6C 8C C1 .%.+nC.. !..rMl.. + NegotiateFlags : 0x60088215 (1611170325) + 1: NTLMSSP_NEGOTIATE_UNICODE + 0: NTLMSSP_NEGOTIATE_OEM + 1: NTLMSSP_REQUEST_TARGET + 1: NTLMSSP_NEGOTIATE_SIGN + 0: NTLMSSP_NEGOTIATE_SEAL + 0: NTLMSSP_NEGOTIATE_DATAGRAM + 0: NTLMSSP_NEGOTIATE_LM_KEY + 0: NTLMSSP_NEGOTIATE_NETWARE + 1: NTLMSSP_NEGOTIATE_NTLM + 0: NTLMSSP_NEGOTIATE_NT_ONLY + 0: NTLMSSP_ANONYMOUS + 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED + 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED + 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL + 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN + 0: NTLMSSP_TARGET_TYPE_DOMAIN + 0: NTLMSSP_TARGET_TYPE_SERVER + 0: NTLMSSP_TARGET_TYPE_SHARE + 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY + 0: NTLMSSP_NEGOTIATE_IDENTIFY + 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY + 0: NTLMSSP_NEGOTIATE_TARGET_INFO + 0: NTLMSSP_NEGOTIATE_VERSION + 1: NTLMSSP_NEGOTIATE_128 + 1: NTLMSSP_NEGOTIATE_KEY_EXCH + 0: NTLMSSP_NEGOTIATE_56 +[2013/11/05 16:03:29.097705, 3, pid=12245, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init) + NTLMSSP Sign/Seal - Initialising with flags: +[2013/11/05 16:03:29.097801, 3, pid=12245, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags) + Got NTLMSSP neg_flags=0x60088215 + NTLMSSP_NEGOTIATE_UNICODE + NTLMSSP_REQUEST_TARGET + NTLMSSP_NEGOTIATE_SIGN + NTLMSSP_NEGOTIATE_NTLM + NTLMSSP_NEGOTIATE_ALWAYS_SIGN + NTLMSSP_NEGOTIATE_NTLM2 + NTLMSSP_NEGOTIATE_128 + NTLMSSP_NEGOTIATE_KEY_EXCH +[2013/11/05 16:03:29.098207, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:271(smb_signing_sign_pdu) + smb_signing_sign_pdu: sent SMB signature of +[2013/11/05 16:03:29.098302, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] 42 53 52 53 50 59 4C 20 BSRSPYL +[2013/11/05 16:03:29.143373, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:379(smb_signing_activate) + smb_signing_activate: user_session_key +[2013/11/05 16:03:29.143535, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] A3 70 CC 9F E9 45 B8 EF 78 70 98 B6 9D 26 95 72 .p...E.. xp...&.r +[2013/11/05 16:03:29.143597, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:388(smb_signing_activate) + smb_signing_activate: NULL response_data +[2013/11/05 16:03:29.143649, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 1 +[2013/11/05 16:03:29.143737, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:330(smb_signing_check_pdu) + smb_signing_check_pdu: seq 1: got good SMB signature of +[2013/11/05 16:03:29.143781, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] 15 6A F4 05 93 6D 4D 61 .j...mMa +[2013/11/05 16:03:29.143890, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/clientgen.c:124(cli_init_creds) + cli_init_creds: user Administrator domain AR32I8 +[2013/11/05 16:03:29.143967, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:86(saf_store) + saf_store: domain = [ARW2003R2], server = [W2K3R2-235], expire = [1383664709] +[2013/11/05 16:03:29.144040, 10, pid=12245, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob) + Adding cache entry with key=[SAF/DOMAIN/ARW2003R2] and timeout=[Di Nov 5 16:18:29 2013 CET] (900 seconds ahead) +[2013/11/05 16:03:29.144209, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 2 +[2013/11/05 16:03:29.144256, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:271(smb_signing_sign_pdu) + smb_signing_sign_pdu: sent SMB signature of +[2013/11/05 16:03:29.144296, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] 7A BF 9F F3 84 C8 8F A4 z....... +[2013/11/05 16:03:29.144950, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 3 +[2013/11/05 16:03:29.145041, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:330(smb_signing_check_pdu) + smb_signing_check_pdu: seq 3: got good SMB signature of +[2013/11/05 16:03:29.145082, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] B9 1E 13 08 18 3B 5C F6 .....;\. +[2013/11/05 16:03:29.145391, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cache.c:3514(set_global_winbindd_state_online) + set_global_winbindd_state_online: online requested. +[2013/11/05 16:03:29.145448, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cache.c:3517(set_global_winbindd_state_online) + set_global_winbindd_state_online: rejecting. +[2013/11/05 16:03:29.145487, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:422(set_domain_online) + set_domain_online: called for domain ARW2003R2 +[2013/11/05 16:03:29.145586, 10, pid=12245, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob) + Adding cache entry with key=[CURRENT_DCNAME/ARW2003R2] and timeout=[Di Jan 19 04:14:07 2038 CET] (763819838 seconds ahead) +[2013/11/05 16:03:29.145689, 5, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:1888(set_dc_type_and_flags_trustinfo) + set_dc_type_and_flags_trustinfo: domain ARW2003R2 +[2013/11/05 16:03:29.145734, 3, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:1796(connection_ok) + connection_ok: Connection to (null) for domain AR32I8 is not connected +[2013/11/05 16:03:29.145803, 3, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:1899(set_dc_type_and_flags_trustinfo) + set_dc_type_and_flags_trustinfo: No connection to our domain! +[2013/11/05 16:03:29.145894, 5, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:2016(set_dc_type_and_flags_connect) + set_dc_type_and_flags_connect: domain ARW2003R2 +[2013/11/05 16:03:29.146089, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 4 +[2013/11/05 16:03:29.146146, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:271(smb_signing_sign_pdu) + smb_signing_sign_pdu: sent SMB signature of +[2013/11/05 16:03:29.146197, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] 58 E4 27 1E A2 53 A5 74 X.'..S.t +[2013/11/05 16:03:29.147071, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 5 +[2013/11/05 16:03:29.147163, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:330(smb_signing_check_pdu) + smb_signing_check_pdu: seq 5: got good SMB signature of +[2013/11/05 16:03:29.147210, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] ED B8 C9 6A F8 EE E2 3C ...j...< +[2013/11/05 16:03:29.147450, 5, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:1581(rpc_pipe_bind_send) + Bind RPC Pipe: host W2K3R2-235 auth_type 0, auth_level 1 +[2013/11/05 16:03:29.147605, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + &r: struct ncacn_packet + rpc_vers : 0x05 (5) + rpc_vers_minor : 0x00 (0) + ptype : DCERPC_PKT_BIND (11) + pfc_flags : 0x03 (3) + drep: ARRAY(4) + [0] : 0x10 (16) + [1] : 0x00 (0) + [2] : 0x00 (0) + [3] : 0x00 (0) + frag_length : 0x0048 (72) + auth_length : 0x0000 (0) + call_id : 0x00000001 (1) + u : union dcerpc_payload(case 11) + bind: struct dcerpc_bind + max_xmit_frag : 0x10b8 (4280) + max_recv_frag : 0x10b8 (4280) + assoc_group_id : 0x00000000 (0) + num_contexts : 0x01 (1) + ctx_list: ARRAY(1) + ctx_list: struct dcerpc_ctx_list + context_id : 0x0000 (0) + num_transfer_syntaxes : 0x01 (1) + abstract_syntax: struct ndr_syntax_id + uuid : 3919286a-b10c-11d0-9ba8-00c04fd92ef5 + if_version : 0x00000000 (0) + transfer_syntaxes: ARRAY(1) + transfer_syntaxes: struct ndr_syntax_id + uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 + if_version : 0x00000002 (2) + auth_info : DATA_BLOB length=0 +[2013/11/05 16:03:29.148269, 5, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:741(rpc_api_pipe_send) + rpc_api_pipe: host W2K3R2-235 +[2013/11/05 16:03:29.148423, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb1cli_trans.c:334(smb1cli_trans_format) + num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 +[2013/11/05 16:03:29.148483, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 6 +[2013/11/05 16:03:29.148524, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:271(smb_signing_sign_pdu) + smb_signing_sign_pdu: sent SMB signature of +[2013/11/05 16:03:29.148563, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] B5 0C E7 2B 8A 0A 0B 80 ...+.... +[2013/11/05 16:03:29.149176, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 7 +[2013/11/05 16:03:29.149251, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:330(smb_signing_check_pdu) + smb_signing_check_pdu: seq 7: got good SMB signature of +[2013/11/05 16:03:29.149291, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] C5 B4 65 96 50 AB 09 2B ..e.P..+ +[2013/11/05 16:03:29.149483, 5, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:100(rpc_read_send) + rpc_read_send: data_to_read: 52 +[2013/11/05 16:03:29.149610, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + r: struct ncacn_packet + rpc_vers : 0x05 (5) + rpc_vers_minor : 0x00 (0) + ptype : DCERPC_PKT_BIND_ACK (12) + pfc_flags : 0x03 (3) + drep: ARRAY(4) + [0] : 0x10 (16) + [1] : 0x00 (0) + [2] : 0x00 (0) + [3] : 0x00 (0) + frag_length : 0x0044 (68) + auth_length : 0x0000 (0) + call_id : 0x00000001 (1) + u : union dcerpc_payload(case 12) + bind_ack: struct dcerpc_bind_ack + max_xmit_frag : 0x10b8 (4280) + max_recv_frag : 0x10b8 (4280) + assoc_group_id : 0x0000747e (29822) + secondary_address_size : 0x000c (12) + secondary_address : '\PIPE\lsass' + _pad1 : DATA_BLOB length=2 + [0000] 02 00 .. + num_results : 0x01 (1) + ctx_list: ARRAY(1) + ctx_list: struct dcerpc_ack_ctx + result : 0x0000 (0) + reason : 0x0000 (0) + syntax: struct ndr_syntax_id + uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 + if_version : 0x00000002 (2) + auth_info : DATA_BLOB length=0 +[2013/11/05 16:03:29.150174, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:885(rpc_api_pipe_got_pdu) + rpc_api_pipe: got frag len of 68 at offset 0: NT_STATUS_OK +[2013/11/05 16:03:29.150243, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:940(rpc_api_pipe_got_pdu) + rpc_api_pipe: host W2K3R2-235 returned 68 bytes. +[2013/11/05 16:03:29.150303, 5, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:1447(check_bind_response) + check_bind_response: accepted! +[2013/11/05 16:03:29.150356, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:2916(cli_rpc_pipe_open_noauth_transport) + cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine W2K3R2-235 and bound anonymously. +[2013/11/05 16:03:29.150430, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) + dssetup_DsRoleGetPrimaryDomainInformation: struct dssetup_DsRoleGetPrimaryDomainInformation + in: struct dssetup_DsRoleGetPrimaryDomainInformation + level : DS_ROLE_BASIC_INFORMATION (1) +[2013/11/05 16:03:29.157935, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + &r: struct ncacn_packet + rpc_vers : 0x05 (5) + rpc_vers_minor : 0x00 (0) + ptype : DCERPC_PKT_REQUEST (0) + pfc_flags : 0x03 (3) + drep: ARRAY(4) + [0] : 0x10 (16) + [1] : 0x00 (0) + [2] : 0x00 (0) + [3] : 0x00 (0) + frag_length : 0x0018 (24) + auth_length : 0x0000 (0) + call_id : 0x00000002 (2) + u : union dcerpc_payload(case 0) + request: struct dcerpc_request + alloc_hint : 0x00000002 (2) + context_id : 0x0000 (0) + opnum : 0x0000 (0) + object : union dcerpc_object(case 0) + empty: struct dcerpc_empty + _pad : DATA_BLOB length=0 + stub_and_verifier : DATA_BLOB length=0 +[2013/11/05 16:03:29.158495, 5, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:741(rpc_api_pipe_send) + rpc_api_pipe: host W2K3R2-235 +[2013/11/05 16:03:29.158573, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb1cli_trans.c:334(smb1cli_trans_format) + num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=26, this_data=26, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 +[2013/11/05 16:03:29.158631, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 8 +[2013/11/05 16:03:29.158675, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:271(smb_signing_sign_pdu) + smb_signing_sign_pdu: sent SMB signature of +[2013/11/05 16:03:29.158714, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] D1 BE 25 1D 55 61 CA 36 ..%.Ua.6 +[2013/11/05 16:03:29.160137, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 9 +[2013/11/05 16:03:29.160212, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:330(smb_signing_check_pdu) + smb_signing_check_pdu: seq 9: got good SMB signature of +[2013/11/05 16:03:29.160253, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] 50 46 0D C6 CC 09 92 35 PF.....5 +[2013/11/05 16:03:29.160385, 5, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:100(rpc_read_send) + rpc_read_send: data_to_read: 168 +[2013/11/05 16:03:29.160455, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + r: struct ncacn_packet + rpc_vers : 0x05 (5) + rpc_vers_minor : 0x00 (0) + ptype : DCERPC_PKT_RESPONSE (2) + pfc_flags : 0x03 (3) + drep: ARRAY(4) + [0] : 0x10 (16) + [1] : 0x00 (0) + [2] : 0x00 (0) + [3] : 0x00 (0) + frag_length : 0x00b8 (184) + auth_length : 0x0000 (0) + call_id : 0x00000002 (2) + u : union dcerpc_payload(case 2) + response: struct dcerpc_response + alloc_hint : 0x000000a0 (160) + context_id : 0x0000 (0) + cancel_count : 0x00 (0) + _pad : DATA_BLOB length=1 + [0000] 00 . + stub_and_verifier : DATA_BLOB length=160 + [0000] 00 00 02 00 01 00 00 00 05 00 00 00 03 00 00 01 ........ ........ + [0010] 04 00 02 00 08 00 02 00 0C 00 02 00 F9 86 B2 99 ........ ........ + [0020] 00 70 D7 42 BB 82 1F 72 1D E8 47 6D 0A 00 00 00 .p.B...r ..Gm.... + [0030] 00 00 00 00 0A 00 00 00 41 00 52 00 57 00 32 00 ........ A.R.W.2. + [0040] 30 00 30 00 33 00 52 00 32 00 00 00 0D 00 00 00 0.0.3.R. 2....... + [0050] 00 00 00 00 0D 00 00 00 61 00 72 00 77 00 32 00 ........ a.r.w.2. + [0060] 30 00 30 00 33 00 72 00 32 00 2E 00 71 00 61 00 0.0.3.r. 2...q.a. + [0070] 00 00 2E 00 0D 00 00 00 00 00 00 00 0D 00 00 00 ........ ........ + [0080] 61 00 72 00 77 00 32 00 30 00 30 00 33 00 72 00 a.r.w.2. 0.0.3.r. + [0090] 32 00 2E 00 71 00 61 00 00 00 61 00 00 00 00 00 2...q.a. ..a..... +[2013/11/05 16:03:29.161788, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:440(cli_pipe_validate_current_pdu) + Got pdu len 184, data_len 160, ss_len 0 +[2013/11/05 16:03:29.161870, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:885(rpc_api_pipe_got_pdu) + rpc_api_pipe: got frag len of 184 at offset 0: NT_STATUS_OK +[2013/11/05 16:03:29.162013, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:940(rpc_api_pipe_got_pdu) + rpc_api_pipe: host W2K3R2-235 returned 160 bytes. +[2013/11/05 16:03:29.162231, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) + dssetup_DsRoleGetPrimaryDomainInformation: struct dssetup_DsRoleGetPrimaryDomainInformation + out: struct dssetup_DsRoleGetPrimaryDomainInformation + info : * + info : union dssetup_DsRoleInfo(case 1) + basic: struct dssetup_DsRolePrimaryDomInfoBasic + role : DS_ROLE_PRIMARY_DC (5) + flags : 0x01000003 (16777219) + 1: DS_ROLE_PRIMARY_DS_RUNNING + 1: DS_ROLE_PRIMARY_DS_MIXED_MODE + 0: DS_ROLE_UPGRADE_IN_PROGRESS + 1: DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT + domain : * + domain : 'ARW2003R2' + dns_domain : * + dns_domain : 'arw2003r2.qa' + forest : * + forest : 'arw2003r2.qa' + domain_guid : 99b286f9-7000-42d7-bb82-1f721de8476d + result : WERR_OK +[2013/11/05 16:03:29.170086, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 10 +[2013/11/05 16:03:29.170188, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:271(smb_signing_sign_pdu) + smb_signing_sign_pdu: sent SMB signature of +[2013/11/05 16:03:29.170231, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] 85 2A 89 D6 E6 B5 04 5F .*....._ +[2013/11/05 16:03:29.171251, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 11 +[2013/11/05 16:03:29.171335, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:330(smb_signing_check_pdu) + smb_signing_check_pdu: seq 11: got good SMB signature of +[2013/11/05 16:03:29.171376, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] BB 80 21 FC 3D 0B E8 CC ..!.=... +[2013/11/05 16:03:29.171793, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 12 +[2013/11/05 16:03:29.171939, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:271(smb_signing_sign_pdu) + smb_signing_sign_pdu: sent SMB signature of +[2013/11/05 16:03:29.171982, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] 93 97 15 F7 68 96 16 D5 ....h... +[2013/11/05 16:03:29.173124, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 13 +[2013/11/05 16:03:29.173330, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:330(smb_signing_check_pdu) + smb_signing_check_pdu: seq 13: got good SMB signature of +[2013/11/05 16:03:29.173374, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] B3 D5 5A 57 76 9C 97 8B ..ZWv... +[2013/11/05 16:03:29.173474, 5, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:1581(rpc_pipe_bind_send) + Bind RPC Pipe: host W2K3R2-235 auth_type 0, auth_level 1 +[2013/11/05 16:03:29.173794, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + &r: struct ncacn_packet + rpc_vers : 0x05 (5) + rpc_vers_minor : 0x00 (0) + ptype : DCERPC_PKT_BIND (11) + pfc_flags : 0x03 (3) + drep: ARRAY(4) + [0] : 0x10 (16) + [1] : 0x00 (0) + [2] : 0x00 (0) + [3] : 0x00 (0) + frag_length : 0x0048 (72) + auth_length : 0x0000 (0) + call_id : 0x00000003 (3) + u : union dcerpc_payload(case 11) + bind: struct dcerpc_bind + max_xmit_frag : 0x10b8 (4280) + max_recv_frag : 0x10b8 (4280) + assoc_group_id : 0x00000000 (0) + num_contexts : 0x01 (1) + ctx_list: ARRAY(1) + ctx_list: struct dcerpc_ctx_list + context_id : 0x0000 (0) + num_transfer_syntaxes : 0x01 (1) + abstract_syntax: struct ndr_syntax_id + uuid : 12345778-1234-abcd-ef00-0123456789ab + if_version : 0x00000000 (0) + transfer_syntaxes: ARRAY(1) + transfer_syntaxes: struct ndr_syntax_id + uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 + if_version : 0x00000002 (2) + auth_info : DATA_BLOB length=0 +[2013/11/05 16:03:29.174435, 5, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:741(rpc_api_pipe_send) + rpc_api_pipe: host W2K3R2-235 +[2013/11/05 16:03:29.174506, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb1cli_trans.c:334(smb1cli_trans_format) + num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 +[2013/11/05 16:03:29.174635, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 14 +[2013/11/05 16:03:29.174679, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:271(smb_signing_sign_pdu) + smb_signing_sign_pdu: sent SMB signature of +[2013/11/05 16:03:29.174889, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] 5A B1 28 C7 3D 1A DC 1E Z.(.=... +[2013/11/05 16:03:29.176209, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 15 +[2013/11/05 16:03:29.176353, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:330(smb_signing_check_pdu) + smb_signing_check_pdu: seq 15: got good SMB signature of +[2013/11/05 16:03:29.176437, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] A4 CE 7F F7 86 D5 9A E4 ........ +[2013/11/05 16:03:29.179035, 5, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:100(rpc_read_send) + rpc_read_send: data_to_read: 52 +[2013/11/05 16:03:29.179183, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + r: struct ncacn_packet + rpc_vers : 0x05 (5) + rpc_vers_minor : 0x00 (0) + ptype : DCERPC_PKT_BIND_ACK (12) + pfc_flags : 0x03 (3) + drep: ARRAY(4) + [0] : 0x10 (16) + [1] : 0x00 (0) + [2] : 0x00 (0) + [3] : 0x00 (0) + frag_length : 0x0044 (68) + auth_length : 0x0000 (0) + call_id : 0x00000003 (3) + u : union dcerpc_payload(case 12) + bind_ack: struct dcerpc_bind_ack + max_xmit_frag : 0x10b8 (4280) + max_recv_frag : 0x10b8 (4280) + assoc_group_id : 0x0000747f (29823) + secondary_address_size : 0x000c (12) + secondary_address : '\PIPE\lsass' + _pad1 : DATA_BLOB length=2 + [0000] 00 01 .. + num_results : 0x01 (1) + ctx_list: ARRAY(1) + ctx_list: struct dcerpc_ack_ctx + result : 0x0000 (0) + reason : 0x0000 (0) + syntax: struct ndr_syntax_id + uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 + if_version : 0x00000002 (2) + auth_info : DATA_BLOB length=0 +[2013/11/05 16:03:29.182981, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:885(rpc_api_pipe_got_pdu) + rpc_api_pipe: got frag len of 68 at offset 0: NT_STATUS_OK +[2013/11/05 16:03:29.183075, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:940(rpc_api_pipe_got_pdu) + rpc_api_pipe: host W2K3R2-235 returned 68 bytes. +[2013/11/05 16:03:29.183154, 5, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:1447(check_bind_response) + check_bind_response: accepted! +[2013/11/05 16:03:29.183246, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:2916(cli_rpc_pipe_open_noauth_transport) + cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine W2K3R2-235 and bound anonymously. +[2013/11/05 16:03:29.183660, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) + lsa_OpenPolicy2: struct lsa_OpenPolicy2 + in: struct lsa_OpenPolicy2 + system_name : * + system_name : '\\W2K3R2-235' + attr : * + attr: struct lsa_ObjectAttribute + len : 0x00000018 (24) + root_dir : NULL + object_name : NULL + attributes : 0x00000000 (0) + sec_desc : NULL + sec_qos : * + sec_qos: struct lsa_QosInfo + len : 0x0000000c (12) + impersonation_level : 0x0002 (2) + context_mode : 0x01 (1) + effective_only : 0x00 (0) + access_mask : 0x02000000 (33554432) + 0: LSA_POLICY_VIEW_LOCAL_INFORMATION + 0: LSA_POLICY_VIEW_AUDIT_INFORMATION + 0: LSA_POLICY_GET_PRIVATE_INFORMATION + 0: LSA_POLICY_TRUST_ADMIN + 0: LSA_POLICY_CREATE_ACCOUNT + 0: LSA_POLICY_CREATE_SECRET + 0: LSA_POLICY_CREATE_PRIVILEGE + 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS + 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS + 0: LSA_POLICY_AUDIT_LOG_ADMIN + 0: LSA_POLICY_SERVER_ADMIN + 0: LSA_POLICY_LOOKUP_NAMES + 0: LSA_POLICY_NOTIFICATION +[2013/11/05 16:03:29.186155, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + &r: struct ncacn_packet + rpc_vers : 0x05 (5) + rpc_vers_minor : 0x00 (0) + ptype : DCERPC_PKT_REQUEST (0) + pfc_flags : 0x03 (3) + drep: ARRAY(4) + [0] : 0x10 (16) + [1] : 0x00 (0) + [2] : 0x00 (0) + [3] : 0x00 (0) + frag_length : 0x0018 (24) + auth_length : 0x0000 (0) + call_id : 0x00000004 (4) + u : union dcerpc_payload(case 0) + request: struct dcerpc_request + alloc_hint : 0x00000050 (80) + context_id : 0x0000 (0) + opnum : 0x002c (44) + object : union dcerpc_object(case 0) + empty: struct dcerpc_empty + _pad : DATA_BLOB length=0 + stub_and_verifier : DATA_BLOB length=0 +[2013/11/05 16:03:29.186639, 5, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:741(rpc_api_pipe_send) + rpc_api_pipe: host W2K3R2-235 +[2013/11/05 16:03:29.186847, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb1cli_trans.c:334(smb1cli_trans_format) + num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=104, this_data=104, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 +[2013/11/05 16:03:29.186924, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 16 +[2013/11/05 16:03:29.186967, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:271(smb_signing_sign_pdu) + smb_signing_sign_pdu: sent SMB signature of +[2013/11/05 16:03:29.187006, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] 6E F0 D6 70 8F 5C 38 AF n..p.\8. +[2013/11/05 16:03:29.187927, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 17 +[2013/11/05 16:03:29.188012, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:330(smb_signing_check_pdu) + smb_signing_check_pdu: seq 17: got good SMB signature of +[2013/11/05 16:03:29.188053, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] 49 FC 19 AB 76 60 D1 1C I...v`.. +[2013/11/05 16:03:29.188144, 5, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:100(rpc_read_send) + rpc_read_send: data_to_read: 32 +[2013/11/05 16:03:29.188210, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + r: struct ncacn_packet + rpc_vers : 0x05 (5) + rpc_vers_minor : 0x00 (0) + ptype : DCERPC_PKT_RESPONSE (2) + pfc_flags : 0x03 (3) + drep: ARRAY(4) + [0] : 0x10 (16) + [1] : 0x00 (0) + [2] : 0x00 (0) + [3] : 0x00 (0) + frag_length : 0x0030 (48) + auth_length : 0x0000 (0) + call_id : 0x00000004 (4) + u : union dcerpc_payload(case 2) + response: struct dcerpc_response + alloc_hint : 0x00000018 (24) + context_id : 0x0000 (0) + cancel_count : 0x00 (0) + _pad : DATA_BLOB length=1 + [0000] 00 . + stub_and_verifier : DATA_BLOB length=24 + [0000] 00 00 00 00 68 4F 9E BD CE E9 06 44 A3 71 2D 18 ....hO.. ...D.q-. + [0010] 23 9D 33 C4 00 00 00 00 #.3..... +[2013/11/05 16:03:29.189040, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:440(cli_pipe_validate_current_pdu) + Got pdu len 48, data_len 24, ss_len 0 +[2013/11/05 16:03:29.189089, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:885(rpc_api_pipe_got_pdu) + rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK +[2013/11/05 16:03:29.189130, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:940(rpc_api_pipe_got_pdu) + rpc_api_pipe: host W2K3R2-235 returned 24 bytes. +[2013/11/05 16:03:29.189201, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) + lsa_OpenPolicy2: struct lsa_OpenPolicy2 + out: struct lsa_OpenPolicy2 + handle : * + handle: struct policy_handle + handle_type : 0x00000000 (0) + uuid : bd9e4f68-e9ce-4406-a371-2d18239d33c4 + result : NT_STATUS_OK +[2013/11/05 16:03:29.189432, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) + lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2 + in: struct lsa_QueryInfoPolicy2 + handle : * + handle: struct policy_handle + handle_type : 0x00000000 (0) + uuid : bd9e4f68-e9ce-4406-a371-2d18239d33c4 + level : LSA_POLICY_INFO_DNS (12) +[2013/11/05 16:03:29.189809, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + &r: struct ncacn_packet + rpc_vers : 0x05 (5) + rpc_vers_minor : 0x00 (0) + ptype : DCERPC_PKT_REQUEST (0) + pfc_flags : 0x03 (3) + drep: ARRAY(4) + [0] : 0x10 (16) + [1] : 0x00 (0) + [2] : 0x00 (0) + [3] : 0x00 (0) + frag_length : 0x0018 (24) + auth_length : 0x0000 (0) + call_id : 0x00000005 (5) + u : union dcerpc_payload(case 0) + request: struct dcerpc_request + alloc_hint : 0x00000016 (22) + context_id : 0x0000 (0) + opnum : 0x002e (46) + object : union dcerpc_object(case 0) + empty: struct dcerpc_empty + _pad : DATA_BLOB length=0 + stub_and_verifier : DATA_BLOB length=0 +[2013/11/05 16:03:29.190205, 5, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:741(rpc_api_pipe_send) + rpc_api_pipe: host W2K3R2-235 +[2013/11/05 16:03:29.190265, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb1cli_trans.c:334(smb1cli_trans_format) + num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=46, this_data=46, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 +[2013/11/05 16:03:29.190318, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 18 +[2013/11/05 16:03:29.190360, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:271(smb_signing_sign_pdu) + smb_signing_sign_pdu: sent SMB signature of +[2013/11/05 16:03:29.190399, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] F8 58 B3 A4 D3 32 8A A2 .X...2.. +[2013/11/05 16:03:29.191177, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 19 +[2013/11/05 16:03:29.191252, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:330(smb_signing_check_pdu) + smb_signing_check_pdu: seq 19: got good SMB signature of +[2013/11/05 16:03:29.191306, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] F1 07 4B 30 A3 B4 6A 9A ..K0..j. +[2013/11/05 16:03:29.191391, 5, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:100(rpc_read_send) + rpc_read_send: data_to_read: 196 +[2013/11/05 16:03:29.191455, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + r: struct ncacn_packet + rpc_vers : 0x05 (5) + rpc_vers_minor : 0x00 (0) + ptype : DCERPC_PKT_RESPONSE (2) + pfc_flags : 0x03 (3) + drep: ARRAY(4) + [0] : 0x10 (16) + [1] : 0x00 (0) + [2] : 0x00 (0) + [3] : 0x00 (0) + frag_length : 0x00d4 (212) + auth_length : 0x0000 (0) + call_id : 0x00000005 (5) + u : union dcerpc_payload(case 2) + response: struct dcerpc_response + alloc_hint : 0x000000bc (188) + context_id : 0x0000 (0) + cancel_count : 0x00 (0) + _pad : DATA_BLOB length=1 + [0000] 00 . + stub_and_verifier : DATA_BLOB length=188 + [0000] 00 00 02 00 0C 00 00 00 12 00 14 00 04 00 02 00 ........ ........ + [0010] 18 00 1A 00 08 00 02 00 18 00 1A 00 0C 00 02 00 ........ ........ + [0020] F9 86 B2 99 00 70 D7 42 BB 82 1F 72 1D E8 47 6D .....p.B ...r..Gm + [0030] 10 00 02 00 0A 00 00 00 00 00 00 00 09 00 00 00 ........ ........ + [0040] 41 00 52 00 57 00 32 00 30 00 30 00 33 00 52 00 A.R.W.2. 0.0.3.R. + [0050] 32 00 00 00 0D 00 00 00 00 00 00 00 0C 00 00 00 2....... ........ + [0060] 61 00 72 00 77 00 32 00 30 00 30 00 33 00 72 00 a.r.w.2. 0.0.3.r. + [0070] 32 00 2E 00 71 00 61 00 0D 00 00 00 00 00 00 00 2...q.a. ........ + [0080] 0C 00 00 00 61 00 72 00 77 00 32 00 30 00 30 00 ....a.r. w.2.0.0. + [0090] 33 00 72 00 32 00 2E 00 71 00 61 00 04 00 00 00 3.r.2... q.a..... + [00A0] 01 04 00 00 00 00 00 05 15 00 00 00 25 C4 A9 2F ........ ....%../ + [00B0] 59 54 54 A5 3A 34 E2 58 00 00 00 00 YTT.:4.X .... +[2013/11/05 16:03:29.192557, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:440(cli_pipe_validate_current_pdu) + Got pdu len 212, data_len 188, ss_len 0 +[2013/11/05 16:03:29.192604, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:885(rpc_api_pipe_got_pdu) + rpc_api_pipe: got frag len of 212 at offset 0: NT_STATUS_OK +[2013/11/05 16:03:29.192644, 10, pid=12245, effective(0, 0), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:940(rpc_api_pipe_got_pdu) + rpc_api_pipe: host W2K3R2-235 returned 188 bytes. +[2013/11/05 16:03:29.192915, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) + lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2 + out: struct lsa_QueryInfoPolicy2 + info : * + info : * + info : union lsa_PolicyInformation(case 12) + dns: struct lsa_DnsDomainInfo + name: struct lsa_StringLarge + length : 0x0012 (18) + size : 0x0014 (20) + string : * + string : 'ARW2003R2' + dns_domain: struct lsa_StringLarge + length : 0x0018 (24) + size : 0x001a (26) + string : * + string : 'arw2003r2.qa' + dns_forest: struct lsa_StringLarge + length : 0x0018 (24) + size : 0x001a (26) + string : * + string : 'arw2003r2.qa' + domain_guid : 99b286f9-7000-42d7-bb82-1f721de8476d + sid : * + sid : S-1-5-21-799654949-2773767257-1491219514 + result : NT_STATUS_OK +[2013/11/05 16:03:29.193537, 5, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:2169(set_dc_type_and_flags_connect) + set_dc_type_and_flags_connect: domain ARW2003R2 is NOT in native mode. +[2013/11/05 16:03:29.193589, 5, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:2172(set_dc_type_and_flags_connect) + set_dc_type_and_flags_connect: domain ARW2003R2 is running active directory. +[2013/11/05 16:03:29.193655, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 20 +[2013/11/05 16:03:29.193795, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:271(smb_signing_sign_pdu) + smb_signing_sign_pdu: sent SMB signature of +[2013/11/05 16:03:29.193839, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] A6 EE 4E AB 70 73 2A 36 ..N.ps*6 +[2013/11/05 16:03:29.194653, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:158(smb_signing_md5) + smb_signing_md5: sequence number 21 +[2013/11/05 16:03:29.194826, 10, pid=12245, effective(0, 0), real(0, 0)] ../libcli/smb/smb_signing.c:330(smb_signing_check_pdu) + smb_signing_check_pdu: seq 21: got good SMB signature of +[2013/11/05 16:03:29.194868, 10, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util.c:512(dump_data) + [0000] 18 B6 07 FC 1E C9 6B A8 ......k. +[2013/11/05 16:03:29.194971, 5, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cache.c:167(get_cache) + get_cache: Setting ADS methods for domain ARW2003R2 +[2013/11/05 16:03:29.195106, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cache.c:420(wcache_fetch_seqnum) + wcache_fetch_seqnum: ARW2003R2 not found +[2013/11/05 16:03:29.195598, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cache.c:4683(wcache_tdc_fetch_domain) + wcache_tdc_fetch_domain: Searching for domain ARW2003R2 +[2013/11/05 16:03:29.195683, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cache.c:4698(wcache_tdc_fetch_domain) + wcache_tdc_fetch_domain: Found domain ARW2003R2 +[2013/11/05 16:03:29.195822, 3, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_ads.c:1355(sequence_number) + ads: fetch sequence_number for ARW2003R2 +[2013/11/05 16:03:29.195867, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cache.c:4683(wcache_tdc_fetch_domain) + wcache_tdc_fetch_domain: Searching for domain ARW2003R2 +[2013/11/05 16:03:29.195919, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cache.c:4698(wcache_tdc_fetch_domain) + wcache_tdc_fetch_domain: Found domain ARW2003R2 +[2013/11/05 16:03:29.195961, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_ads.c:206(ads_cached_connection) + ads_cached_connection +[2013/11/05 16:03:29.196081, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb) + Attempting to register passdb backend smbpasswd +[2013/11/05 16:03:29.196224, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb) + Successfully added passdb backend 'smbpasswd' +[2013/11/05 16:03:29.196270, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb) + Attempting to register passdb backend tdbsam +[2013/11/05 16:03:29.196327, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb) + Successfully added passdb backend 'tdbsam' +[2013/11/05 16:03:29.196367, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb) + Attempting to register passdb backend wbc_sam +[2013/11/05 16:03:29.196406, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb) + Successfully added passdb backend 'wbc_sam' +[2013/11/05 16:03:29.196445, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb) + Attempting to register passdb backend samba_dsdb +[2013/11/05 16:03:29.196550, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb) + Successfully added passdb backend 'samba_dsdb' +[2013/11/05 16:03:29.196590, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb) + Attempting to register passdb backend samba4 +[2013/11/05 16:03:29.196636, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb) + Successfully added passdb backend 'samba4' +[2013/11/05 16:03:29.196830, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb) + Attempting to register passdb backend ldapsam +[2013/11/05 16:03:29.196883, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb) + Successfully added passdb backend 'ldapsam' +[2013/11/05 16:03:29.196923, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb) + Attempting to register passdb backend NDS_ldapsam +[2013/11/05 16:03:29.197036, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb) + Successfully added passdb backend 'NDS_ldapsam' +[2013/11/05 16:03:29.197082, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb) + Attempting to register passdb backend IPA_ldapsam +[2013/11/05 16:03:29.197156, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb) + Successfully added passdb backend 'IPA_ldapsam' +[2013/11/05 16:03:29.197227, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:153(make_pdb_method_name) + Attempting to find a passdb backend to match ldapsam:"ldap://master40.ar32i8.qa:7389" (ldapsam) +[2013/11/05 16:03:29.197274, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:174(make_pdb_method_name) + Found pdb backend ldapsam +[2013/11/05 16:03:29.197829, 2, pid=12245, effective(0, 0), real(0, 0)] ../source3/passdb/pdb_ldap_util.c:280(smbldap_search_domain_info) + smbldap_search_domain_info: Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=AR32I8))] +[2013/11/05 16:03:29.197961, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/smbldap.c:1249(smbldap_search_ext) + smbldap_search_ext: base => [dc=ar32i8,dc=qa], filter => [(&(objectClass=sambaDomain)(sambaDomainName=AR32I8))], scope => [2] +[2013/11/05 16:03:29.198169, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/smbldap.c:1114(smbldap_close) + The connection to the LDAP server was closed +[2013/11/05 16:03:29.198218, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/smbldap.c:595(smb_ldap_setup_conn) + smb_ldap_setup_connection: ldap://master40.ar32i8.qa:7389 +[2013/11/05 16:03:29.214687, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/smbldap.c:579(smbldap_start_tls) + StartTLS issued: using a TLS connection +[2013/11/05 16:03:29.214901, 2, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/smbldap.c:794(smbldap_open_connection) + smbldap_open_connection: connection opened +[2013/11/05 16:03:29.214943, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/smbldap.c:954(smbldap_connect_system) + ldap_connect_system: Binding to ldap server ldap://master40.ar32i8.qa:7389 as "cn=admin,dc=ar32i8,dc=qa" +[2013/11/05 16:03:29.217051, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/smbldap.c:1013(smbldap_connect_system) + ldap_connect_system: successful connection to the LDAP server + ldap_connect_system: LDAP server does support paged results +[2013/11/05 16:03:29.217153, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/smbldap.c:1092(smbldap_open) + The LDAP server is successfully connected +[2013/11/05 16:03:29.218097, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/smbldap.c:90(smbldap_talloc_single_attribute) + attribute sambaAlgorithmicRidBase does not exist +[2013/11/05 16:03:29.218390, 5, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:185(make_pdb_method_name) + pdb backend ldapsam:"ldap://master40.ar32i8.qa:7389" has a valid init +[2013/11/05 16:03:29.218457, 10, pid=12245, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_ldap.c:6091(ldapsam_get_trusteddom_pw) + ldapsam_get_trusteddom_pw called for domain ARW2003R2 +[2013/11/05 16:03:29.218643, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/smbldap.c:1249(smbldap_search_ext) + smbldap_search_ext: base => [sambaDomainName=ARW2003R2,sambaDomainName=AR32I8,cn=samba,dc=ar32i8,dc=qa], filter => [(&(objectClass=sambaTrustedDomainPassword)(sambaDomainName=ARW2003R2))], scope => [2] +[2013/11/05 16:03:29.219967, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:102(sitename_fetch) + sitename_fetch: No stored sitename for arw2003r2.qa +[2013/11/05 16:03:29.220056, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery_dc.c:77(ads_dc_name) + ads_dc_name: domain=ARW2003R2 +[2013/11/05 16:03:29.220123, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:102(sitename_fetch) + sitename_fetch: No stored sitename for arw2003r2.qa +[2013/11/05 16:03:29.220233, 6, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:422(ads_find_dc) + ads_find_dc: (cldap) looking for realm 'arw2003r2.qa' +[2013/11/05 16:03:29.220295, 8, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3289(get_sorted_dc_list) + get_sorted_dc_list: attempting lookup for name arw2003r2.qa (sitename NULL) +[2013/11/05 16:03:29.220372, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:208(saf_fetch) + saf_fetch: failed to find server for "arw2003r2.qa" domain +[2013/11/05 16:03:29.220418, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3102(get_dc_list) + get_dc_list: preferred server list: ", *" +[2013/11/05 16:03:29.220459, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2598(internal_resolve_name) + internal_resolve_name: looking up arw2003r2.qa#1c (sitename (null)) +[2013/11/05 16:03:29.220611, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:160(namecache_fetch) + no entry for arw2003r2.qa#1C found. +[2013/11/05 16:03:29.220661, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2452(resolve_ads) + resolve_ads: Attempting to resolve DCs for arw2003r2.qa using DNS +[2013/11/05 16:03:29.241234, 3, pid=12245, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:346(dns_send_req) + dns_send_req: Failed to resolve _ldap._tcp.dc._msdcs.arw2003r2.qa (Erfolg) +[2013/11/05 16:03:29.241695, 3, pid=12245, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:423(ads_dns_lookup_srv) + ads_dns_lookup_srv: Failed to send DNS query (NT_STATUS_UNSUCCESSFUL) +[2013/11/05 16:03:29.241928, 8, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3123(get_dc_list) + Adding 0 DC's from auto lookup +[2013/11/05 16:03:29.242049, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3134(get_dc_list) + get_dc_list: no servers found +[2013/11/05 16:03:29.242140, 6, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:422(ads_find_dc) + ads_find_dc: (cldap) looking for domain 'arw2003r2.qa' +[2013/11/05 16:03:29.242208, 8, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3289(get_sorted_dc_list) + get_sorted_dc_list: attempting lookup for name arw2003r2.qa (sitename NULL) +[2013/11/05 16:03:29.242340, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:208(saf_fetch) + saf_fetch: failed to find server for "arw2003r2.qa" domain +[2013/11/05 16:03:29.242416, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3102(get_dc_list) + get_dc_list: preferred server list: ", *" +[2013/11/05 16:03:29.242587, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2598(internal_resolve_name) + internal_resolve_name: looking up arw2003r2.qa#1c (sitename (null)) +[2013/11/05 16:03:29.242924, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:160(namecache_fetch) + no entry for arw2003r2.qa#1C found. +[2013/11/05 16:03:29.243005, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2266(resolve_lmhosts) + resolve_lmhosts: Attempting lmhosts lookup for name arw2003r2.qa<0x1c> +[2013/11/05 16:03:29.243077, 3, pid=12245, effective(0, 0), real(0, 0)] ../libcli/nbt/lmhosts.c:185(resolve_lmhosts_file_as_sockaddr) + resolve_lmhosts: Attempting lmhosts lookup for name arw2003r2.qa<0x1c> +[2013/11/05 16:03:29.243154, 4, pid=12245, effective(0, 0), real(0, 0)] ../libcli/nbt/lmhosts.c:41(startlmhosts) + startlmhosts: Can't open lmhosts file /etc/samba/lmhosts. Error was Datei oder Verzeichnis nicht gefunden +[2013/11/05 16:03:29.243356, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2110(resolve_wins_send) + wins_server_tag_ips failed for tag * +[2013/11/05 16:03:29.243550, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2315(resolve_hosts) + resolve_hosts: not appropriate for name type <0x1c> +[2013/11/05 16:03:29.243644, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1806(name_resolve_bcast_send) + name_resolve_bcast: Attempting broadcast lookup for name arw2003r2.qa<0x1c> +[2013/11/05 16:03:29.245153, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:499(open_socket_in) + bind succeeded on port 0 +[2013/11/05 16:03:29.246385, 5, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options) + Socket options: + SO_KEEPALIVE = 0 + SO_REUSEADDR = 1 + SO_BROADCAST = 1 + Could not test socket option TCP_NODELAY. + Could not test socket option TCP_KEEPCNT. + Could not test socket option TCP_KEEPIDLE. + Could not test socket option TCP_KEEPINTVL. + IPTOS_LOWDELAY = 0 + IPTOS_THROUGHPUT = 0 + SO_REUSEPORT = 1 + SO_SNDBUF = 212992 + SO_RCVBUF = 212992 + SO_SNDLOWAT = 1 + SO_RCVLOWAT = 1 + SO_SNDTIMEO = 0 + SO_RCVTIMEO = 0 + Could not test socket option TCP_QUICKACK. + Could not test socket option TCP_DEFER_ACCEPT. +[2013/11/05 16:03:30.249028, 2, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/tevent_debug.c:63(samba_tevent_debug) + samba_tevent: EPOLL_CTL_DEL EBADF for fde[0x7f6040cdc990] mpx_fde[(nil)] fd[25] - disabling +[2013/11/05 16:03:30.249355, 8, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3123(get_dc_list) + Adding 0 DC's from auto lookup +[2013/11/05 16:03:30.249502, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3134(get_dc_list) + get_dc_list: no servers found +[2013/11/05 16:03:30.249731, 8, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3289(get_sorted_dc_list) + get_sorted_dc_list: attempting lookup for name ARW2003R2 (sitename NULL) +[2013/11/05 16:03:30.249978, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:211(saf_fetch) + saf_fetch: Returning "W2K3R2-235" for "ARW2003R2" domain +[2013/11/05 16:03:30.250094, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3102(get_dc_list) + get_dc_list: preferred server list: "W2K3R2-235, *" +[2013/11/05 16:03:30.250198, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2598(internal_resolve_name) + internal_resolve_name: looking up ARW2003R2#1c (sitename (null)) +[2013/11/05 16:03:30.250326, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:165(namecache_fetch) + name ARW2003R2#1C found. +[2013/11/05 16:03:30.250626, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1110(remove_duplicate_addrs2) + remove_duplicate_addrs2: looking for duplicate address/port pairs +[2013/11/05 16:03:30.250737, 8, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3123(get_dc_list) + Adding 1 DC's from auto lookup +[2013/11/05 16:03:30.250928, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:102(sitename_fetch) + sitename_fetch: No stored sitename for +[2013/11/05 16:03:30.251031, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2598(internal_resolve_name) + internal_resolve_name: looking up W2K3R2-235#20 (sitename (null)) +[2013/11/05 16:03:30.251155, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:165(namecache_fetch) + name W2K3R2-235#20 found. +[2013/11/05 16:03:30.251323, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1110(remove_duplicate_addrs2) + remove_duplicate_addrs2: looking for duplicate address/port pairs +[2013/11/05 16:03:30.251469, 9, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) + check_negative_conn_cache returning result 0 for domain ARW2003R2 server 10.200.8.235 +[2013/11/05 16:03:30.251604, 9, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) + check_negative_conn_cache returning result 0 for domain ARW2003R2 server 10.200.8.235 +[2013/11/05 16:03:30.251705, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1110(remove_duplicate_addrs2) + remove_duplicate_addrs2: looking for duplicate address/port pairs +[2013/11/05 16:03:30.251815, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3239(get_dc_list) + get_dc_list: returning 1 ip addresses in an ordered list +[2013/11/05 16:03:30.251914, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3240(get_dc_list) + get_dc_list: 10.200.8.235:0 +[2013/11/05 16:03:30.252049, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:916(name_status_find) + name_status_find: looking up ARW2003R2#1c at 10.200.8.235 +[2013/11/05 16:03:30.252193, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:299(namecache_status_fetch) + namecache_status_fetch: no entry for NBT/ARW2003R2#1C.20.10.200.8.235 found. +[2013/11/05 16:03:30.252499, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:499(open_socket_in) + bind succeeded on port 0 +[2013/11/05 16:03:30.255039, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/nmblib.c:550(parse_nmb) + parse_nmb: packet id = 6538 +[2013/11/05 16:03:30.255354, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/nmblib.c:108(debug_nmb_packet) + nmb packet from 10.200.8.235(35072) header: id=6538 opcode=Query(0) response=Yes + header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes + header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 + answers: nmb_name=ARW2003R2<1c> rr_type=33 rr_class=1 ttl=0 + answers 0 char .W2K3R2-235 hex 0857324B3352322D3233352020202020 + answers 10 char ...ARW2003R2 hex 00040041525732303033523220202020 + answers 20 char ...ARW2003R2 hex 20200084004152573230303352322020 + answers 30 char ...W2K3R2-23 hex 202020201C840057324B3352322D3233 + answers 40 char 5 ..ARW2003 hex 35202020202020040041525732303033 + answers 50 char R2 ...ARW20 hex 52322020202020201B04004152573230 + answers 60 char 03R2 ...ARW hex 303352322020202020201E8400415257 + answers 70 char 2003R2 .... hex 3230303352322020202020201D040001 + answers 80 char .__MSBROWSE__... hex 025F5F4D5342524F5753455F5F020184 + answers 90 char .RT.on.......... hex 005254006F6E96000000000000000000 + answers a0 char ................ hex 00000000000000000000000000000000 + answers b0 char ............... hex 000000000000000000000000000000 +[2013/11/05 16:03:30.257421, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + W2K3R2-235#00: flags = 0x04 +[2013/11/05 16:03:30.257604, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + ARW2003R2#00: flags = 0x84 +[2013/11/05 16:03:30.257827, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + ARW2003R2#1c: flags = 0x84 +[2013/11/05 16:03:30.257937, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + W2K3R2-235#20: flags = 0x04 +[2013/11/05 16:03:30.258034, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + ARW2003R2#1b: flags = 0x04 +[2013/11/05 16:03:30.258129, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + ARW2003R2#1e: flags = 0x84 +[2013/11/05 16:03:30.258224, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + ARW2003R2#1d: flags = 0x04 +[2013/11/05 16:03:30.258321, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + __MSBROWSE__#01: flags = 0x84 +[2013/11/05 16:03:30.258539, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:962(name_status_find) + name_status_find: name found, name W2K3R2-235 ip address is 10.200.8.235 +[2013/11/05 16:03:30.258862, 9, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) + check_negative_conn_cache returning result 0 for domain ARW2003R2 server W2K3R2-235 +[2013/11/05 16:03:30.258997, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery_dc.c:209(rpc_dc_name) + rpc_dc_name: Returning DC W2K3R2-235 (10.200.8.235) for domain ARW2003R2 +[2013/11/05 16:03:30.259116, 6, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:402(ads_find_dc) + ads_find_dc: (ldap) looking for realm 'arw2003r2.qa' +[2013/11/05 16:03:30.259258, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:102(sitename_fetch) + sitename_fetch: No stored sitename for arw2003r2.qa +[2013/11/05 16:03:30.259366, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery_dc.c:77(ads_dc_name) + ads_dc_name: domain=ARW2003R2 +[2013/11/05 16:03:30.259488, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:102(sitename_fetch) + sitename_fetch: No stored sitename for arw2003r2.qa +[2013/11/05 16:03:30.259584, 6, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:422(ads_find_dc) + ads_find_dc: (cldap) looking for realm 'arw2003r2.qa' +[2013/11/05 16:03:30.259680, 8, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3289(get_sorted_dc_list) + get_sorted_dc_list: attempting lookup for name arw2003r2.qa (sitename NULL) +[2013/11/05 16:03:30.260027, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:208(saf_fetch) + saf_fetch: failed to find server for "arw2003r2.qa" domain +[2013/11/05 16:03:30.260154, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3102(get_dc_list) + get_dc_list: preferred server list: ", *" +[2013/11/05 16:03:30.260257, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2598(internal_resolve_name) + internal_resolve_name: looking up arw2003r2.qa#1c (sitename (null)) +[2013/11/05 16:03:30.260410, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:160(namecache_fetch) + no entry for arw2003r2.qa#1C found. +[2013/11/05 16:03:30.260530, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2452(resolve_ads) + resolve_ads: Attempting to resolve DCs for arw2003r2.qa using DNS +[2013/11/05 16:03:30.282596, 3, pid=12245, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:346(dns_send_req) + dns_send_req: Failed to resolve _ldap._tcp.dc._msdcs.arw2003r2.qa (Erfolg) +[2013/11/05 16:03:30.283075, 3, pid=12245, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:423(ads_dns_lookup_srv) + ads_dns_lookup_srv: Failed to send DNS query (NT_STATUS_UNSUCCESSFUL) +[2013/11/05 16:03:30.283208, 8, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3123(get_dc_list) + Adding 0 DC's from auto lookup +[2013/11/05 16:03:30.283309, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3134(get_dc_list) + get_dc_list: no servers found +[2013/11/05 16:03:30.283409, 6, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:422(ads_find_dc) + ads_find_dc: (cldap) looking for domain 'arw2003r2.qa' +[2013/11/05 16:03:30.283520, 8, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3289(get_sorted_dc_list) + get_sorted_dc_list: attempting lookup for name arw2003r2.qa (sitename NULL) +[2013/11/05 16:03:30.283683, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:208(saf_fetch) + saf_fetch: failed to find server for "arw2003r2.qa" domain +[2013/11/05 16:03:30.283968, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3102(get_dc_list) + get_dc_list: preferred server list: ", *" +[2013/11/05 16:03:30.284084, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2598(internal_resolve_name) + internal_resolve_name: looking up arw2003r2.qa#1c (sitename (null)) +[2013/11/05 16:03:30.284213, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:160(namecache_fetch) + no entry for arw2003r2.qa#1C found. +[2013/11/05 16:03:30.284319, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2266(resolve_lmhosts) + resolve_lmhosts: Attempting lmhosts lookup for name arw2003r2.qa<0x1c> +[2013/11/05 16:03:30.284421, 3, pid=12245, effective(0, 0), real(0, 0)] ../libcli/nbt/lmhosts.c:185(resolve_lmhosts_file_as_sockaddr) + resolve_lmhosts: Attempting lmhosts lookup for name arw2003r2.qa<0x1c> +[2013/11/05 16:03:30.284532, 4, pid=12245, effective(0, 0), real(0, 0)] ../libcli/nbt/lmhosts.c:41(startlmhosts) + startlmhosts: Can't open lmhosts file /etc/samba/lmhosts. Error was Datei oder Verzeichnis nicht gefunden +[2013/11/05 16:03:30.285410, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2110(resolve_wins_send) + wins_server_tag_ips failed for tag * +[2013/11/05 16:03:30.285596, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2315(resolve_hosts) + resolve_hosts: not appropriate for name type <0x1c> +[2013/11/05 16:03:30.285872, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1806(name_resolve_bcast_send) + name_resolve_bcast: Attempting broadcast lookup for name arw2003r2.qa<0x1c> +[2013/11/05 16:03:30.286134, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:499(open_socket_in) + bind succeeded on port 0 +[2013/11/05 16:03:30.286257, 5, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options) + Socket options: + SO_KEEPALIVE = 0 + SO_REUSEADDR = 1 + SO_BROADCAST = 1 + Could not test socket option TCP_NODELAY. + Could not test socket option TCP_KEEPCNT. + Could not test socket option TCP_KEEPIDLE. + Could not test socket option TCP_KEEPINTVL. + IPTOS_LOWDELAY = 0 + IPTOS_THROUGHPUT = 0 + SO_REUSEPORT = 1 + SO_SNDBUF = 212992 + SO_RCVBUF = 212992 + SO_SNDLOWAT = 1 + SO_RCVLOWAT = 1 + SO_SNDTIMEO = 0 + SO_RCVTIMEO = 0 + Could not test socket option TCP_QUICKACK. + Could not test socket option TCP_DEFER_ACCEPT. +[2013/11/05 16:03:31.289850, 2, pid=12245, effective(0, 0), real(0, 0)] ../lib/util/tevent_debug.c:63(samba_tevent_debug) + samba_tevent: EPOLL_CTL_DEL EBADF for fde[0x7f6040cdca30] mpx_fde[(nil)] fd[25] - disabling +[2013/11/05 16:03:31.290197, 8, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3123(get_dc_list) + Adding 0 DC's from auto lookup +[2013/11/05 16:03:31.290313, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3134(get_dc_list) + get_dc_list: no servers found +[2013/11/05 16:03:31.290428, 8, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3289(get_sorted_dc_list) + get_sorted_dc_list: attempting lookup for name ARW2003R2 (sitename NULL) +[2013/11/05 16:03:31.290612, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:211(saf_fetch) + saf_fetch: Returning "W2K3R2-235" for "ARW2003R2" domain +[2013/11/05 16:03:31.290729, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3102(get_dc_list) + get_dc_list: preferred server list: "W2K3R2-235, *" +[2013/11/05 16:03:31.290835, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2598(internal_resolve_name) + internal_resolve_name: looking up ARW2003R2#1c (sitename (null)) +[2013/11/05 16:03:31.290966, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:165(namecache_fetch) + name ARW2003R2#1C found. +[2013/11/05 16:03:31.291199, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1110(remove_duplicate_addrs2) + remove_duplicate_addrs2: looking for duplicate address/port pairs +[2013/11/05 16:03:31.291308, 8, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3123(get_dc_list) + Adding 1 DC's from auto lookup +[2013/11/05 16:03:31.291443, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:102(sitename_fetch) + sitename_fetch: No stored sitename for +[2013/11/05 16:03:31.291544, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2598(internal_resolve_name) + internal_resolve_name: looking up W2K3R2-235#20 (sitename (null)) +[2013/11/05 16:03:31.291669, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:165(namecache_fetch) + name W2K3R2-235#20 found. +[2013/11/05 16:03:31.291839, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1110(remove_duplicate_addrs2) + remove_duplicate_addrs2: looking for duplicate address/port pairs +[2013/11/05 16:03:31.291978, 9, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) + check_negative_conn_cache returning result 0 for domain ARW2003R2 server 10.200.8.235 +[2013/11/05 16:03:31.292114, 9, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) + check_negative_conn_cache returning result 0 for domain ARW2003R2 server 10.200.8.235 +[2013/11/05 16:03:31.292219, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1110(remove_duplicate_addrs2) + remove_duplicate_addrs2: looking for duplicate address/port pairs +[2013/11/05 16:03:31.292323, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3239(get_dc_list) + get_dc_list: returning 1 ip addresses in an ordered list +[2013/11/05 16:03:31.292420, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3240(get_dc_list) + get_dc_list: 10.200.8.235:0 +[2013/11/05 16:03:31.292534, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:916(name_status_find) + name_status_find: looking up ARW2003R2#1c at 10.200.8.235 +[2013/11/05 16:03:31.292661, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:299(namecache_status_fetch) + namecache_status_fetch: no entry for NBT/ARW2003R2#1C.20.10.200.8.235 found. +[2013/11/05 16:03:31.296003, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:499(open_socket_in) + bind succeeded on port 0 +[2013/11/05 16:03:31.298479, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/nmblib.c:550(parse_nmb) + parse_nmb: packet id = 25049 +[2013/11/05 16:03:31.299095, 4, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/nmblib.c:108(debug_nmb_packet) + nmb packet from 10.200.8.235(35072) header: id=25049 opcode=Query(0) response=Yes + header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes + header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 + answers: nmb_name=ARW2003R2<1c> rr_type=33 rr_class=1 ttl=0 + answers 0 char .W2K3R2-235 hex 0857324B3352322D3233352020202020 + answers 10 char ...ARW2003R2 hex 00040041525732303033523220202020 + answers 20 char ...ARW2003R2 hex 20200084004152573230303352322020 + answers 30 char ...W2K3R2-23 hex 202020201C840057324B3352322D3233 + answers 40 char 5 ..ARW2003 hex 35202020202020040041525732303033 + answers 50 char R2 ...ARW20 hex 52322020202020201B04004152573230 + answers 60 char 03R2 ...ARW hex 303352322020202020201E8400415257 + answers 70 char 2003R2 .... hex 3230303352322020202020201D040001 + answers 80 char .__MSBROWSE__... hex 025F5F4D5342524F5753455F5F020184 + answers 90 char .RT.on.......... hex 005254006F6E96000000000000000000 + answers a0 char ................ hex 00000000000000000000000000000000 + answers b0 char ............... hex 000000000000000000000000000000 +[2013/11/05 16:03:31.301822, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + W2K3R2-235#00: flags = 0x04 +[2013/11/05 16:03:31.301979, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + ARW2003R2#00: flags = 0x84 +[2013/11/05 16:03:31.302083, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + ARW2003R2#1c: flags = 0x84 +[2013/11/05 16:03:31.302458, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + W2K3R2-235#20: flags = 0x04 +[2013/11/05 16:03:31.302567, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + ARW2003R2#1b: flags = 0x04 +[2013/11/05 16:03:31.302879, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + ARW2003R2#1e: flags = 0x84 +[2013/11/05 16:03:31.302981, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + ARW2003R2#1d: flags = 0x04 +[2013/11/05 16:03:31.303082, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:278(parse_node_status) + __MSBROWSE__#01: flags = 0x84 +[2013/11/05 16:03:31.303467, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:962(name_status_find) + name_status_find: name found, name W2K3R2-235 ip address is 10.200.8.235 +[2013/11/05 16:03:31.303828, 9, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) + check_negative_conn_cache returning result 0 for domain ARW2003R2 server W2K3R2-235 +[2013/11/05 16:03:31.303953, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery_dc.c:209(rpc_dc_name) + rpc_dc_name: Returning DC W2K3R2-235 (10.200.8.235) for domain ARW2003R2 +[2013/11/05 16:03:31.304230, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:102(sitename_fetch) + sitename_fetch: No stored sitename for +[2013/11/05 16:03:31.305020, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2598(internal_resolve_name) + internal_resolve_name: looking up W2K3R2-235#20 (sitename (null)) +[2013/11/05 16:03:31.306938, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:165(namecache_fetch) + name W2K3R2-235#20 found. +[2013/11/05 16:03:31.308078, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1110(remove_duplicate_addrs2) + remove_duplicate_addrs2: looking for duplicate address/port pairs +[2013/11/05 16:03:31.308477, 5, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:270(ads_try_connect) + ads_try_connect: sending CLDAP request to 10.200.8.235 (realm: arw2003r2.qa) +[2013/11/05 16:03:31.311302, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) + &response->data.nt5_ex: struct NETLOGON_SAM_LOGON_RESPONSE_EX + command : LOGON_SAM_LOGON_RESPONSE_EX (23) + sbz : 0x0000 (0) + server_type : 0x000003fd (1021) + 1: NBT_SERVER_PDC + 1: NBT_SERVER_GC + 1: NBT_SERVER_LDAP + 1: NBT_SERVER_DS + 1: NBT_SERVER_KDC + 1: NBT_SERVER_TIMESERV + 1: NBT_SERVER_CLOSEST + 1: NBT_SERVER_WRITABLE + 1: NBT_SERVER_GOOD_TIMESERV + 0: NBT_SERVER_NDNC + 0: NBT_SERVER_SELECT_SECRET_DOMAIN_6 + 0: NBT_SERVER_FULL_SECRET_DOMAIN_6 + 0: NBT_SERVER_ADS_WEB_SERVICE + 0: NBT_SERVER_HAS_DNS_NAME + 0: NBT_SERVER_IS_DEFAULT_NC + 0: NBT_SERVER_FOREST_ROOT + domain_uuid : 99b286f9-7000-42d7-bb82-1f721de8476d + forest : 'arw2003r2.qa' + dns_domain : 'arw2003r2.qa' + pdc_dns_name : 'w2k3r2-235.arw2003r2.qa' + domain_name : 'ARW2003R2' + pdc_name : 'W2K3R2-235' + user_name : '' + server_site : 'Standardname-des-ersten-Standorts' + client_site : 'Standardname-des-ersten-Standorts' + sockaddr_size : 0x00 (0) + sockaddr: struct nbt_sockaddr + sockaddr_family : 0x00000000 (0) + pdc_ip : (null) + remaining : DATA_BLOB length=0 + next_closest_site : NULL + nt_version : 0x00000005 (5) + 1: NETLOGON_NT_VERSION_1 + 0: NETLOGON_NT_VERSION_5 + 1: NETLOGON_NT_VERSION_5EX + 0: NETLOGON_NT_VERSION_5EX_WITH_IP + 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE + 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL + 0: NETLOGON_NT_VERSION_PDC + 0: NETLOGON_NT_VERSION_IP + 0: NETLOGON_NT_VERSION_LOCAL + 0: NETLOGON_NT_VERSION_GC + lmnt_token : 0xffff (65535) + lm20_token : 0xffff (65535) +[2013/11/05 16:03:31.313522, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:70(sitename_store) + sitename_store: realm = [ARW2003R2], sitename = [Standardname-des-ersten-Standorts], expire = [2085923199] +[2013/11/05 16:03:31.313614, 10, pid=12245, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob) + Adding cache entry with key=[AD_SITENAME/DOMAIN/ARW2003R2] and timeout=[67768036191676799 seconds since the Epoch] (702259388 seconds ahead) +[2013/11/05 16:03:31.314752, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:70(sitename_store) + sitename_store: realm = [arw2003r2.qa], sitename = [Standardname-des-ersten-Standorts], expire = [2085923199] +[2013/11/05 16:03:31.314814, 10, pid=12245, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:296(gencache_set_data_blob) + Adding cache entry with key=[AD_SITENAME/DOMAIN/ARW2003R2.QA] and timeout=[67768036191676799 seconds since the Epoch] (702259388 seconds ahead) +[2013/11/05 16:03:31.314913, 3, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:680(ads_connect) + Successfully contacted LDAP server 10.200.8.235 +[2013/11/05 16:03:31.314982, 10, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:70(ldap_open_with_timeout) + Opening connection to LDAP server 'w2k3r2-235.arw2003r2.qa:389', timeout 15 seconds +[2013/11/05 16:03:31.315450, 2, pid=12245, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:116(ldap_open_with_timeout) + Could not open connection to LDAP server w2k3r2-235.arw2003r2.qa:389: Erfolg +[2013/11/05 16:03:31.315550, 1, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_ads.c:122(ads_cached_connection_connect) + ads_connect for domain ARW2003R2 failed: Operations error +[2013/11/05 16:03:31.315630, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cache.c:571(refresh_sequence_number) + refresh_sequence_number: failed with NT_STATUS_UNSUCCESSFUL +[2013/11/05 16:03:31.316844, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cache.c:496(wcache_store_seqnum) + wcache_store_seqnum: success [ARW2003R2][4294967295 @ 1383663811] +[2013/11/05 16:03:31.316904, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cache.c:583(refresh_sequence_number) + refresh_sequence_number: ARW2003R2 seq number is now -1 +[2013/11/05 16:03:31.316989, 1, pid=12245, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) + wbint_LookupName: struct wbint_LookupName + out: struct wbint_LookupName + type : * + type : SID_NAME_USE_NONE (0) + sid : * + sid : S-0-0 + result : NT_STATUS_UNSUCCESSFUL +[2013/11/05 16:03:31.317223, 4, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_dual.c:1341(child_handler) + Finished processing child request 59 +[2013/11/05 16:03:31.317267, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_dual.c:1358(child_handler) + Writing 3512 bytes to parent diff -Nuar samba.0/log.winbindd samba.1/log.winbindd --- samba.0/log.winbindd 2013-11-05 16:03:28.020000000 +0100 +++ samba.1/log.winbindd 2013-11-05 16:03:31.320000000 +0100 @@ -378,3 +378,83 @@ idmap config ARW2003R2 : range = not defined [2013/11/05 16:03:24.225305, 2, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_util.c:237(add_trusted_domain) Added domain ARW2003R2 (null) S-1-5-21-799654949-2773767257-1491219514 +[2013/11/05 16:03:28.033114, 6, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:870(new_connection) + accepted socket 19 +[2013/11/05 16:03:28.033394, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:720(process_request) + process_request: request fn INTERFACE_VERSION +[2013/11/05 16:03:28.033449, 3, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_misc.c:395(winbindd_interface_version) + [12244]: request interface version +[2013/11/05 16:03:28.033554, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:816(winbind_client_response_written) + winbind_client_response_written[12244:INTERFACE_VERSION]: delivered response to client +[2013/11/05 16:03:28.033648, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:720(process_request) + process_request: request fn WINBINDD_PRIV_PIPE_DIR +[2013/11/05 16:03:28.033692, 3, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_misc.c:428(winbindd_priv_pipe_dir) + [12244]: request location of privileged pipe +[2013/11/05 16:03:28.033778, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:816(winbind_client_response_written) + winbind_client_response_written[12244:WINBINDD_PRIV_PIPE_DIR]: delivered response to client +[2013/11/05 16:03:28.033887, 6, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:870(new_connection) + accepted socket 21 +[2013/11/05 16:03:28.035056, 6, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:918(winbind_client_request_read) + closing socket 19, client exited +[2013/11/05 16:03:28.035219, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:720(process_request) + process_request: request fn INTERFACE_VERSION +[2013/11/05 16:03:28.035265, 3, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_misc.c:395(winbindd_interface_version) + [12244]: request interface version +[2013/11/05 16:03:28.035325, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:816(winbind_client_response_written) + winbind_client_response_written[12244:INTERFACE_VERSION]: delivered response to client +[2013/11/05 16:03:28.035412, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:720(process_request) + process_request: request fn INFO +[2013/11/05 16:03:28.035459, 3, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_misc.c:383(winbindd_info) + [12244]: request misc info +[2013/11/05 16:03:28.035531, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:816(winbind_client_response_written) + winbind_client_response_written[12244:INFO]: delivered response to client +[2013/11/05 16:03:28.035619, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:720(process_request) + process_request: request fn NETBIOS_NAME +[2013/11/05 16:03:28.035660, 3, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_misc.c:416(winbindd_netbios_name) + [12244]: request netbios name +[2013/11/05 16:03:28.035726, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:816(winbind_client_response_written) + winbind_client_response_written[12244:NETBIOS_NAME]: delivered response to client +[2013/11/05 16:03:28.035806, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:720(process_request) + process_request: request fn DOMAIN_NAME +[2013/11/05 16:03:28.035848, 3, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_misc.c:405(winbindd_domain_name) + [12244]: request domain name +[2013/11/05 16:03:28.035902, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:816(winbind_client_response_written) + winbind_client_response_written[12244:DOMAIN_NAME]: delivered response to client +[2013/11/05 16:03:28.037247, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:720(process_request) + process_request: request fn DOMAIN_INFO +[2013/11/05 16:03:28.037336, 3, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_misc.c:237(winbindd_domain_info) + [12244]: domain_info [AR32I8] +[2013/11/05 16:03:28.037428, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:816(winbind_client_response_written) + winbind_client_response_written[12244:DOMAIN_INFO]: delivered response to client +[2013/11/05 16:03:28.037566, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:693(process_request) + process_request: Handling async request 12244:LOOKUPNAME +[2013/11/05 16:03:28.037652, 3, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_lookupname.c:69(winbindd_lookupname_send) + lookupname ARW2003R2+winuser1 +[2013/11/05 16:03:28.039406, 1, pid=12227, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) + wbint_LookupName: struct wbint_LookupName + in: struct wbint_LookupName + domain : * + domain : 'ARW2003R2' + name : * + name : 'WINUSER1' + flags : 0x00000000 (0) +[2013/11/05 16:03:28.039764, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_dual.c:1380(fork_domain_child) + fork_domain_child called for domain 'ARW2003R2' +[2013/11/05 16:03:28.044575, 10, pid=12245, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_dual.c:1436(fork_domain_child) + Child process 12245 +[2013/11/05 16:03:31.317616, 1, pid=12227, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) + wbint_LookupName: struct wbint_LookupName + out: struct wbint_LookupName + type : * + type : SID_NAME_USE_NONE (0) + sid : * + sid : S-0-0 + result : NT_STATUS_UNSUCCESSFUL +[2013/11/05 16:03:31.318938, 5, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_lookupname.c:104(winbindd_lookupname_recv) + Could not convert sid S-0-0: NT_STATUS_UNSUCCESSFUL +[2013/11/05 16:03:31.318997, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:755(wb_request_done) + wb_request_done[12244:LOOKUPNAME]: NT_STATUS_UNSUCCESSFUL +[2013/11/05 16:03:31.321764, 10, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:816(winbind_client_response_written) + winbind_client_response_written[12244:LOOKUPNAME]: delivered response to client +[2013/11/05 16:03:31.321901, 6, pid=12227, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd.c:918(winbind_client_request_read) + closing socket 21, client exited